This quickstart is for operating a self-hosted Claw daemon with production-minded defaults.
Install claw from releases, then verify:
claw --versionIn your repository root:
claw initThis creates .claw/ and prepares local object storage.
Example policy requiring test and lint evidence:
claw policy create \
--id default \
--visibility public \
--check test \
--check lint \
--reviewer release-bot \
--min-trust-score 0.8Store a token in a profile used by daemon startup:
claw auth token set "<strong-random-token>" --profile defaultRun preflight before exposing the service:
claw admin preflightExpected output starts with Preflight: PASS.
Example localhost start for validation:
claw daemon --listen 127.0.0.1:50051 --auth-profile defaultFor production, run under a supervisor (for example systemd) and bind to your service interface.
From a client/consumer repository:
claw remote add origin http://claw-daemon.internal:50051 --kind grpc --token-profile default
claw sync pull --remote origin --ref-name heads/mainIf heads/main does not yet exist remotely, transport/auth is still validated when you get Remote ref heads/main not found.